Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139372e302f32342d3234203d3e20323632363136.roa
File:                     34352e3138352e3139372e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          ijftDP4d1JN1wQAQNkHFxJFjtuzxv+Ffd1uS4Im8NCU=
Subject key identifier:   84:2F:F8:2F:9D:ED:5B:5A:AD:1F:0F:81:B1:B2:04:5E:FC:59:8E:4D
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       64C8C7CE290C5EE4DC525BCA1504652CE7AC53A8
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139372e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 06 Mar 2025 05:00:18 +0000
ROA not before:           Thu 06 Mar 2025 04:55:18 +0000
ROA not after:            Thu 05 Mar 2026 05:00:18 +0000
asID:                     262616
IP address blocks:        45.185.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c8:c7:ce:29:0c:5e:e4:dc:52:5b:ca:15:04:65:2c:e7:ac:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Mar  6 04:55:18 2025 GMT
            Not After : Mar  5 05:00:18 2026 GMT
        Subject: CN=842FF82F9DED5B5AAD1F0F81B1B2045EFC598E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:56:48:db:8b:bf:ef:53:93:5e:36:12:87:
                    86:8e:a7:47:92:c1:c4:f4:eb:d0:5a:f0:3e:92:7d:
                    39:90:aa:63:fa:cc:de:b7:93:e0:43:1d:cf:80:3d:
                    bc:66:3f:66:c3:7b:e5:36:5b:04:a5:2f:8a:0c:e3:
                    5d:f4:1d:90:9b:10:ec:1c:90:28:15:d1:e3:c2:1a:
                    dc:47:f8:da:59:3b:8c:b5:97:d5:53:80:28:c0:10:
                    52:2b:6b:cc:c8:dd:64:07:c9:e8:0e:c0:1b:93:11:
                    a1:f2:b5:25:0f:41:fe:b1:a3:61:fd:47:70:fc:3a:
                    d8:b7:40:24:af:65:10:12:ea:da:4d:ad:16:8f:27:
                    86:f4:20:ac:2c:8a:b1:03:d9:a3:dc:eb:bd:09:b4:
                    6d:1c:2f:b8:da:7d:59:fa:cd:25:45:32:9e:1f:4c:
                    0c:a0:3f:16:85:90:71:25:b1:6e:c0:41:ff:85:a2:
                    5a:d1:8b:e7:6b:a6:4a:ec:9b:d4:e9:d6:e1:32:93:
                    43:07:14:c6:42:41:a3:21:e7:68:ca:e9:b1:f3:ab:
                    dc:de:ef:9a:59:04:a8:25:32:ed:73:4a:f0:2b:06:
                    0c:7e:44:38:70:f1:8d:29:de:2a:20:e4:c7:cd:8e:
                    40:21:12:f0:d6:dc:ca:0a:ce:7d:62:37:18:2f:4d:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2F:F8:2F:9D:ED:5B:5A:AD:1F:0F:81:B1:B2:04:5E:FC:59:8E:4D
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/34352e3138352e3139372e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:38:54:6a:31:98:40:94:85:d9:ee:de:b7:14:95:63:e5:9d:
         7a:e1:1f:41:d0:71:f7:97:9d:bb:4d:1e:88:1f:27:eb:df:3a:
         34:e0:8f:7a:a2:12:91:4e:07:fd:73:c9:fc:54:8b:4d:58:43:
         99:6c:f4:4d:d2:73:65:0f:8b:cb:02:4f:c0:03:ec:29:ae:c5:
         83:80:8f:5f:a2:45:29:0f:f0:c2:90:a5:99:64:7e:f3:ca:b8:
         fb:d0:5d:30:1c:d8:94:5c:82:07:54:31:a2:3b:b9:ff:8f:2c:
         73:09:1d:32:22:d6:9b:50:0b:29:56:73:bc:19:5a:61:34:23:
         06:b6:b3:5b:1e:d6:17:8c:b4:2c:ba:f8:8b:5f:df:3a:0c:01:
         de:1e:29:57:21:1d:ad:70:67:33:f6:e1:e5:f2:d4:d9:6e:fa:
         c5:9d:42:d5:32:10:b9:21:56:0f:6e:7e:0a:59:9f:fa:c9:0c:
         46:93:85:77:33:4b:6d:23:99:85:40:3d:05:44:7b:d3:7d:b5:
         70:36:48:29:40:f5:b3:7d:6c:03:17:02:e7:5a:35:a0:cd:96:
         ed:25:b5:8a:2a:aa:15:64:1a:96:33:e5:c2:14:d0:26:69:f5:
         66:8e:28:cf:ee:7d:be:6d:c1:f1:66:74:ec:92:8d:3c:08:b1:
         32:b2:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:40:42 2025 by rpki-client